ExitNodes config use fingerprint rather than nickname

Nick Mathewson nickm at freehaven.net
Thu May 8 00:21:23 UTC 2008


On Wed, May 07, 2008 at 02:54:19PM -0700, Wesley Kenzie wrote:
> I am considering trying my hand at a patch to allow fingerprints to be used
> in place of nicknames for ExitNodes and EntryNodes config variables.  (There
> are quite a few duplicate nicknames floating around which are not
> immediately obvious. I added a list of them yesterday to
> http://www.pickaproxy.com/?speak=tor so they can be easily identified.)  The
> problem currently is that duplicate nicknames cannot be used as specified
> exit or entry nodes.

This feature already exists.  Just stick a $ before the fingerprint,
as in:

EntryNodes $70A08C76BCB9ADE55907029B83DB6891957AC92C

If you want to force a given name binding, you can use the format
  $70A08C76BCB9ADE55907029B83DB6891957AC92C=peacetime
to only match a "Named" server with the given nickname and key, or
  $70A08C76BCB9ADE55907029B83DB6891957AC92C~peacetime
to match any server with the given nickname and key.

This feature could be better documented, though, and I'd love to get a
documentation patch to explain all of this better. :)

yrs,
-- 
Nick





More information about the tor-dev mailing list